@cortexkit/opencode-antigravity-auth 1.0.1 → 2.0.0

package/dist/src/sidebar-state.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"sidebar-state.d.ts","sourceRoot":"","sources":["../../src/sidebar-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAeH,eAAO,MAAM,qBAAqB,EAAG,CAAU,CAAA;AAE/C,MAAM,MAAM,eAAe,GACvB,QAAQ,GACR,YAAY,GACZ,cAAc,GACd,SAAS,CAAA;AAEb,MAAM,WAAW,iBAAiB;IAChC,gBAAgB,EAAE,MAAM,CAAA;IACxB,OAAO,CAAC,EAAE,MAAM,CAAA;CACjB;AAED,MAAM,WAAW,mBAAmB;IAClC,EAAE,EAAE,MAAM,CAAA;IACV,KAAK,EAAE,MAAM,CAAA;IACb,OAAO,EAAE,OAAO,CAAA;IAChB,MAAM,EAAE,MAAM,CAAA;IACd,OAAO,EAAE,OAAO,CAAA;IAChB,aAAa,CAAC,EAAE,MAAM,CAAA;IACtB,KAAK,EAAE,OAAO,CAAC,MAAM,CAAC,eAAe,EAAE,iBAAiB,CAAC,CAAC,CAAA;CAC3D;AAED,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,WAAW,EAAE,QAAQ,GAAG,QAAQ,CAAA;IAChC,WAAW,EAAE,aAAa,GAAG,YAAY,CAAA;IACzC,QAAQ,CAAC,EAAE,QAAQ,GAAG,aAAa,GAAG,QAAQ,CAAA;IAC9C,SAAS,EAAE,MAAM,CAAA;CAClB;AAED,MAAM,WAAW,cAAc;IAC7B,OAAO,EAAE,OAAO,qBAAqB,CAAA;IACrC,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,mBAAmB,EAAE,CAAA;IAC/B,aAAa,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAAA;IAClD,oBAAoB,EAAE,OAAO,CAAA;IAC7B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAED;;;;GAIG;AACH,MAAM,WAAW,mBAAmB;IAClC,SAAS,EAAE,MAAM,CAAA;IACjB,QAAQ,EAAE,mBAAmB,EAAE,CAAA;IAC/B,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB;;;;OAIG;IACH,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC/B;AAED,eAAO,MAAM,qBAAqB,EAAE,cAMnC,CAAA;AAED,eAAO,MAAM,iBAAiB,wCAAwC,CAAA;AAmBtE;;;;GAIG;AACH,qBAAa,+BAAgC,SAAQ,KAAK;IACxD,QAAQ,CAAC,OAAO,EAAE;QAAE,SAAS,EAAE,MAAM,CAAC;QAAC,SAAS,EAAE,MAAM,CAAA;KAAE,CAAA;gBAE9C,SAAS,EAAE,MAAM,EAAE,SAAS,EAAE,MAAM;CAOjD;AAED;;;;;;;;;GASG;AACH,MAAM,MAAM,gBAAgB,GACxB,YAAY,GACZ,eAAe,GACf,YAAY,GACZ,cAAc,GACd,aAAa,CAAA;AAEjB,MAAM,WAAW,iBAAiB;IAChC,MAAM,CAAC,EAAE,CAAC,IAAI,EAAE,gBAAgB,KAAK,OAAO,CAAC,IAAI,CAAC,GAAG,IAAI,CAAA;CAC1D;AAID;;;;;GAKG;AACH,wBAAgB,oBAAoB,CAAC,KAAK,EAAE,iBAAiB,GAAG,IAAI,GAAG,IAAI,CAE1E;AAMD;;;;;;;GAOG;AACH,wBAAgB,mBAAmB,IAAI,MAAM,CAK5C;AAED;;;;;;;;;GASG;AACH,wBAAgB,gBAAgB,CAC9B,IAAI,GAAE,MAA8B,GACnC,cAAc,CAchB;AA4JD;;;GAGG;AACH,wBAAgB,qBAAqB,CACnC,IAAI,GAAE,MAA8B,GACnC,IAAI,CAEN;AAED;;;;GAIG;AACH,wBAAgB,kBAAkB,CAChC,GAAG,EAAE,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,EACxC,GAAG,EAAE,MAAM,GACV,MAAM,CAAC,MAAM,EAAE,mBAAmB,CAAC,CAarC;AAED;;;;;;;;;GASG;AACH,MAAM,WAAW,4BAA4B;IAC3C,qDAAqD;IACrD,KAAK,EAAE,MAAM,CAAA;IACb,kEAAkE;IAClE,KAAK,CAAC,EAAE,MAAM,CAAA;IACd,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,OAAO,CAAC,EAAE,OAAO,CAAA;IACjB,gBAAgB,CAAC,EAAE,MAAM,CAAA;IACzB,gEAAgE;IAChE,WAAW,CAAC,EAAE,MAAM,CAAA;IACpB,WAAW,CAAC,EAAE;QACZ,MAAM,CAAC,EAAE;YAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;QAC3D,YAAY,CAAC,EAAE;YAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;QACjE,cAAc,CAAC,EAAE;YAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;QACnE,SAAS,CAAC,EAAE;YAAE,iBAAiB,CAAC,EAAE,MAAM,CAAC;YAAC,SAAS,CAAC,EAAE,MAAM,CAAA;SAAE,CAAA;KAC/D,CAAA;CACF;AAED;;;;;GAKG;AACH,wBAAgB,uBAAuB,CACrC,MAAM,EAAE,4BAA4B,GACnC,mBAAmB,CAgDrB;AAED;;;;GAIG;AACH,wBAAgB,oCAAoC,CAClD,QAAQ,EAAE,4BAA4B,EAAE,EACxC,OAAO,GAAE;IACP,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,iBAAiB,CAAC,EAAE,MAAM,CAAA;IAC1B,SAAS,CAAC,EAAE,MAAM,CAAA;IAClB,oBAAoB,CAAC,EAAE,OAAO,CAAA;CAC1B,GACL,mBAAmB,CAQrB;AAED,UAAU,wBAAwB;IAChC,SAAS,CAAC,EAAE,MAAM,CAAA;CACnB;AAeD;;;;GAIG;AACH,wBAAgB,kBAAkB,IAAI,OAAO,CAAC,IAAI,CAAC,CAElD;AAqGD;;;;;GAKG;AACH,wBAAsB,0BAA0B,CAC9C,SAAS,EAAE,MAAM,EACjB,KAAK,EAAE,mBAAmB,EAC1B,OAAO,GAAE,wBAAwB,GAAG;IAAE,aAAa,CAAC,EAAE,OAAO,CAAA;CAAO,GACnE,OAAO,CAAC,IAAI,CAAC,CAWf;AAED;;;GAGG;AACH,wBAAsB,0BAA0B,CAC9C,SAAS,EAAE,MAAM,EACjB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,IAAI,CAAC,CAaf;AAED;;;;GAIG;AACH,wBAAsB,sBAAsB,CAC1C,IAAI,EAAE,mBAAmB,EACzB,OAAO,GAAE,wBAA6B,GACrC,OAAO,CAAC,IAAI,CAAC,CAKf"}

package/dist/src/sidebar-state.js

@@ -0,0 +1,520 @@
+/**
+ * Sidebar state contract for the OpenTUI sidebar.
+ *
+ * This module is the read-only seam between the long-running plugin and the
+ * Solid/OpenTUI sidebar tree. It deliberately does NOT import account storage,
+ * the account manager, OAuth code, or any other privileged host-side module:
+ * the TUI is rendered inside the host's terminal and a single stray import
+ * could leak credentials or pull a heavy manager into the render path.
+ *
+ * The plugin writes a redacted snapshot to the file resolved by
+ * `getSidebarStateFile()` and the TUI polls it. The contract version is `1`:
+ * any future field that the TUI cannot understand must be ignored, and any
+ * broken/missing file must collapse to `DEFAULT_SIDEBAR_STATE`.
+ *
+ * ## Writer surface
+ *
+ * The plugin-side writers live here too so the read and write halves of the
+ * contract evolve together. They are imported by the plugin (auth-loader,
+ * quota, fetch-interceptor, event-handler, commands) but never invoked from
+ * the TUI's compiled tree — that tree only calls the readers, so the
+ * heavyweight core imports below never run inside the host's render path.
+ *
+ * Every disk mutation follows the same recipe:
+ *
+ *   1. Serialize through `sidebarWriteChain` so concurrent in-process calls
+ *      never interleave merges against the same file.
+ *   2. Acquire Task 7's `acquireFencedFileLock` with bounded retry+jitter
+ *      (≤2s). A live cross-process holder that does not release in time
+ *      surfaces as `SidebarStateLockContentionError`.
+ *   3. Re-read and normalize the on-disk state while holding the lock.
+ *   4. Merge the new machine or routing payload against the re-read state.
+ *   5. `assertOwned()` + `writeJsonAtomic` with mode 0o600, then release.
+ *
+ * The merge step is deterministic: machine fields adopt only when the new
+ * `checkedAt` is ≥ the on-disk one, `routingAuthoritative` is sticky-true,
+ * and `activeRouting` is merged independently and pruned to the freshest
+ * 100 entries within 24h.
+ */
+import { mkdirSync, readFileSync } from 'node:fs';
+import { homedir } from 'node:os';
+import { dirname, join } from 'node:path';
+// Subpath imports (not the barrel): this file ships into the TUI's
+// compiled tree, and the barrel re-exports account/OAuth/quota modules
+// that must never execute inside the host's render path.
+import { writeJsonAtomic } from '@cortexkit/antigravity-auth-core/atomic-write';
+import { acquireFencedFileLock, } from '@cortexkit/antigravity-auth-core/file-lock';
+import { xdgState } from 'xdg-basedir';
+export const SIDEBAR_STATE_VERSION = 1;
+export const DEFAULT_SIDEBAR_STATE = {
+    version: SIDEBAR_STATE_VERSION,
+    checkedAt: 0,
+    accounts: [],
+    activeRouting: {},
+    routingAuthoritative: false,
+};
+export const SIDEBAR_STATE_ENV = 'ANTIGRAVITY_AUTH_SIDEBAR_STATE_FILE';
+const SIDEBAR_STATE_DIR = 'cortexkit/antigravity-auth';
+const SIDEBAR_STATE_FILENAME = 'sidebar-state.json';
+/** Active routing entries older than this are dropped on every merge. */
+const ACTIVE_ROUTING_MAX_AGE_MS = 24 * 60 * 60 * 1000;
+/** Active routing map is capped at this many newest entries. */
+const ACTIVE_ROUTING_MAX_ENTRIES = 100;
+const SIDEBAR_LOCK_NAME = 'sidebar';
+const SIDEBAR_LOCK_TTL_MS = 10_000;
+const SIDEBAR_LOCK_TIMEOUT_MS = 2_000;
+const SIDEBAR_LOCK_RETRY_BASE_MS = 25;
+const SIDEBAR_LOCK_RETRY_CAP_MS = 75;
+const SIDEBAR_LOCK_JITTER_MS = 25;
+const SIDEBAR_STATE_DIR_MODE = 0o700;
+const SIDEBAR_STATE_FILE_MODE = 0o600;
+/**
+ * Thrown by every writer when the cross-process lock cannot be acquired
+ * within `SIDEBAR_LOCK_TIMEOUT_MS`. The caller decides whether to surface
+ * a toast, drop the write, or retry the next tick.
+ */
+export class SidebarStateLockContentionError extends Error {
+    details;
+    constructor(stateFile, timeoutMs) {
+        super(`Could not acquire sidebar-state lock at ${stateFile} within ${timeoutMs}ms`);
+        this.name = 'SidebarStateLockContentionError';
+        this.details = { stateFile, timeoutMs };
+    }
+}
+let sidebarMergeHooks = null;
+/**
+ * Install (or clear with `null`) the deterministic race hooks. Tests use
+ * these to inject interleavings; production callers leave them unset. The
+ * module-level state means a test must reset hooks in its own `afterEach`
+ * to avoid bleeding into the next test.
+ */
+export function setSidebarMergeHooks(hooks) {
+    sidebarMergeHooks = hooks;
+}
+async function emitMergeStep(step) {
+    await sidebarMergeHooks?.onStep?.(step);
+}
+/**
+ * Resolve the on-disk path the plugin writes to and the TUI reads from.
+ *
+ * - `ANTIGRAVITY_AUTH_SIDEBAR_STATE_FILE` wins when set (tests, packaged
+ *   installers, and any user override).
+ * - Otherwise fall back to the XDG state directory, mirroring the path
+ *   conventions used elsewhere in the project.
+ */
+export function getSidebarStateFile() {
+    const override = process.env[SIDEBAR_STATE_ENV];
+    if (override && override.trim().length > 0)
+        return override;
+    const base = xdgState ?? join(homedir(), '.local', 'state');
+    return join(base, SIDEBAR_STATE_DIR, SIDEBAR_STATE_FILENAME);
+}
+/**
+ * Read and normalize the sidebar state file. Returns the default state when
+ * the file is missing, unreadable, malformed, or schema-incompatible — the TUI
+ * must never throw out of `readSidebarState()`, the panel just shows
+ * "Awaiting Antigravity state" and the next poll retries.
+ *
+ * The read is sync on purpose: the TUI polls on a 2-second timer and the file
+ * is tiny (a handful of accounts); an async read here would just add race
+ * surface area against Solid's reactive render cycle.
+ */
+export function readSidebarState(path = getSidebarStateFile()) {
+    let raw;
+    try {
+        raw = readFileSync(path, 'utf-8');
+    }
+    catch {
+        return { ...DEFAULT_SIDEBAR_STATE };
+    }
+    let parsed;
+    try {
+        parsed = JSON.parse(raw);
+    }
+    catch {
+        return { ...DEFAULT_SIDEBAR_STATE, lastError: 'malformed-json' };
+    }
+    return normalizeSidebarState(parsed);
+}
+function normalizeSidebarState(input) {
+    if (!isObject(input)) {
+        return { ...DEFAULT_SIDEBAR_STATE, lastError: 'shape' };
+    }
+    const record = input;
+    const version = record.version;
+    if (version !== SIDEBAR_STATE_VERSION) {
+        return {
+            ...DEFAULT_SIDEBAR_STATE,
+            lastError: `unsupported-version:${stringifySafe(version)}`,
+        };
+    }
+    const accountsRaw = record.accounts;
+    const accounts = Array.isArray(accountsRaw)
+        ? accountsRaw
+            .map((entry) => normalizeAccount(entry))
+            .filter((entry) => entry !== null)
+        : [];
+    const routingRaw = record.activeRouting;
+    const activeRouting = {};
+    if (isObject(routingRaw)) {
+        for (const [sessionId, entry] of Object.entries(routingRaw)) {
+            const normalized = normalizeRouting(entry);
+            if (normalized)
+                activeRouting[sessionId] = normalized;
+        }
+    }
+    const checkedAt = toFiniteNumber(record.checkedAt);
+    const routingAuthoritative = record.routingAuthoritative === true;
+    const quotaBackoffUntil = toFiniteNumber(record.quotaBackoffUntil);
+    const lastError = typeof record.lastError === 'string' ? record.lastError : undefined;
+    return {
+        version: SIDEBAR_STATE_VERSION,
+        checkedAt: checkedAt ?? 0,
+        accounts,
+        activeRouting,
+        routingAuthoritative,
+        quotaBackoffUntil: quotaBackoffUntil ?? undefined,
+        lastError,
+    };
+}
+function normalizeAccount(input) {
+    if (!isObject(input))
+        return null;
+    const record = input;
+    const id = typeof record.id === 'string' ? record.id : null;
+    const label = typeof record.label === 'string' ? record.label : null;
+    if (!id || !label)
+        return null;
+    const enabled = record.enabled !== false;
+    const health = clampNumber(toFiniteNumber(record.health), 0, 100);
+    const current = record.current === true;
+    const cooldownUntil = toFiniteNumber(record.cooldownUntil) ?? undefined;
+    const quotaRaw = record.quota;
+    const quota = {};
+    if (isObject(quotaRaw)) {
+        for (const key of [
+            'claude',
+            'gemini-pro',
+            'gemini-flash',
+            'gpt-oss',
+        ]) {
+            const entry = quotaRaw[key];
+            const normalized = normalizeQuota(entry);
+            if (normalized)
+                quota[key] = normalized;
+        }
+    }
+    return {
+        id,
+        label,
+        enabled,
+        health,
+        current,
+        cooldownUntil,
+        quota,
+    };
+}
+function normalizeQuota(input) {
+    if (!isObject(input))
+        return null;
+    const record = input;
+    const remaining = toFiniteNumber(record.remainingPercent);
+    if (remaining === null)
+        return null;
+    const resetAt = toFiniteNumber(record.resetAt) ?? undefined;
+    return {
+        remainingPercent: clampNumber(remaining, 0, 100),
+        resetAt,
+    };
+}
+function normalizeRouting(input) {
+    if (!isObject(input))
+        return null;
+    const record = input;
+    const accountId = typeof record.accountId === 'string' ? record.accountId : null;
+    const modelFamily = record.modelFamily;
+    const headerStyle = record.headerStyle;
+    const strategy = record.strategy;
+    const updatedAt = toFiniteNumber(record.updatedAt) ?? 0;
+    if (!accountId ||
+        (modelFamily !== 'claude' && modelFamily !== 'gemini') ||
+        (headerStyle !== 'antigravity' && headerStyle !== 'gemini-cli')) {
+        return null;
+    }
+    return {
+        accountId,
+        modelFamily,
+        headerStyle,
+        strategy: strategy === 'sticky' ||
+            strategy === 'round-robin' ||
+            strategy === 'hybrid'
+            ? strategy
+            : undefined,
+        updatedAt,
+    };
+}
+function isObject(value) {
+    return typeof value === 'object' && value !== null && !Array.isArray(value);
+}
+function toFiniteNumber(value) {
+    if (typeof value === 'number' && Number.isFinite(value))
+        return value;
+    if (typeof value === 'string') {
+        const parsed = Number(value);
+        return Number.isFinite(parsed) ? parsed : null;
+    }
+    return null;
+}
+function clampNumber(value, min, max) {
+    if (value === null)
+        return min;
+    if (value < min)
+        return min;
+    if (value > max)
+        return max;
+    return value;
+}
+function stringifySafe(value) {
+    if (typeof value === 'string')
+        return value;
+    try {
+        return JSON.stringify(value) ?? 'unknown';
+    }
+    catch {
+        return 'unknown';
+    }
+}
+/**
+ * Ensure the parent directory for the sidebar state file exists. Convenience
+ * helper used by writers (tests, plugins) — the TUI itself does not write.
+ */
+export function ensureSidebarStateDir(path = getSidebarStateFile()) {
+    mkdirSync(dirname(path), { recursive: true, mode: SIDEBAR_STATE_DIR_MODE });
+}
+/**
+ * Drop active-routing entries older than 24h and cap the map at the freshest
+ * 100. Pure helper exposed for unit testing; the writers call it on every
+ * merge so the on-disk map never grows without bound.
+ */
+export function pruneActiveRouting(map, now) {
+    const cutoff = now - ACTIVE_ROUTING_MAX_AGE_MS;
+    const filtered = [];
+    for (const [sessionId, entry] of Object.entries(map)) {
+        if (entry.updatedAt >= cutoff) {
+            filtered.push([sessionId, entry]);
+        }
+    }
+    filtered.sort((a, b) => b[1].updatedAt - a[1].updatedAt);
+    if (filtered.length <= ACTIVE_ROUTING_MAX_ENTRIES) {
+        return Object.fromEntries(filtered);
+    }
+    return Object.fromEntries(filtered.slice(0, ACTIVE_ROUTING_MAX_ENTRIES));
+}
+/**
+ * Convert a live account snapshot into the redacted shape the TUI renders.
+ * The redacted `SidebarAccountState` carries no email, refresh token, access
+ * token, project ID, fingerprint, OAuth profile name, or other personal or
+ * credential-shaped fields. Display labels are generated ordinal account names.
+ */
+export function redactAccountForSidebar(source) {
+    const id = `acct-${source.index}`;
+    const label = `Account ${source.index + 1}`;
+    const enabled = source.enabled !== false;
+    const current = source.current === true;
+    const cooldownUntil = typeof source.coolingDownUntil === 'number' &&
+        Number.isFinite(source.coolingDownUntil)
+        ? source.coolingDownUntil
+        : undefined;
+    const health = clampNumber(typeof source.healthScore === 'number' ? source.healthScore : null, 0, 100);
+    const quota = {};
+    const cached = source.cachedQuota;
+    if (cached) {
+        for (const key of [
+            'claude',
+            'gemini-pro',
+            'gemini-flash',
+            'gpt-oss',
+        ]) {
+            const entry = cached[key];
+            if (!entry)
+                continue;
+            const fraction = entry.remainingFraction;
+            if (typeof fraction !== 'number' || !Number.isFinite(fraction))
+                continue;
+            const remainingPercent = clampNumber(Math.round(fraction * 100), 0, 100);
+            let resetAt;
+            if (typeof entry.resetTime === 'string' && entry.resetTime.length > 0) {
+                const parsed = Date.parse(entry.resetTime);
+                if (Number.isFinite(parsed))
+                    resetAt = parsed;
+            }
+            quota[key] = { remainingPercent, resetAt };
+        }
+    }
+    return {
+        id,
+        label,
+        enabled,
+        health,
+        current,
+        cooldownUntil,
+        quota,
+    };
+}
+/**
+ * Build a `SidebarMachineState` from a list of live account snapshots.
+ * Convenience for the auth-loader / quota writer call sites that already
+ * hold an array of accounts and want to push a single snapshot.
+ */
+export function buildSidebarMachineStateFromAccounts(accounts, options = {}) {
+    return {
+        checkedAt: options.checkedAt ?? Date.now(),
+        accounts: accounts.map((entry) => redactAccountForSidebar(entry)),
+        quotaBackoffUntil: options.quotaBackoffUntil,
+        lastError: options.lastError,
+        routingAuthoritative: options.routingAuthoritative,
+    };
+}
+let sidebarWriteChain = Promise.resolve();
+function enqueueSidebarWrite(work) {
+    // Always run `work` regardless of whether the prior link resolved or
+    // rejected — a failed write must not poison the chain for the next caller.
+    const next = sidebarWriteChain.then(work, work);
+    sidebarWriteChain = next.then(() => undefined, () => undefined);
+    return next;
+}
+/**
+ * Wait for any in-flight sidebar state write to drain. The plugin lifecycle
+ * calls this during `dispose()` so the file logger and RPC server are torn
+ * down only after every queued write has either landed or thrown.
+ */
+export function drainSidebarWrites() {
+    return sidebarWriteChain;
+}
+async function sleep(ms) {
+    await new Promise((resolve) => setTimeout(resolve, ms));
+}
+async function acquireSidebarLockWithRetry(stateFile) {
+    const start = Date.now();
+    let attempt = 0;
+    while (true) {
+        await emitMergeStep('await-lock');
+        const lock = await acquireFencedFileLock({
+            path: stateFile,
+            name: SIDEBAR_LOCK_NAME,
+            ttlMs: SIDEBAR_LOCK_TTL_MS,
+            renew: true,
+        });
+        if (lock) {
+            await emitMergeStep('acquired-lock');
+            return lock;
+        }
+        const elapsed = Date.now() - start;
+        if (elapsed >= SIDEBAR_LOCK_TIMEOUT_MS) {
+            throw new SidebarStateLockContentionError(stateFile, SIDEBAR_LOCK_TIMEOUT_MS);
+        }
+        const backoff = Math.min(SIDEBAR_LOCK_RETRY_CAP_MS, SIDEBAR_LOCK_RETRY_BASE_MS + attempt * 10);
+        const jitter = Math.floor(Math.random() * SIDEBAR_LOCK_JITTER_MS);
+        await sleep(backoff + jitter);
+        attempt++;
+    }
+}
+async function performSidebarWrite(stateFile, merge) {
+    await enqueueSidebarWrite(async () => {
+        ensureSidebarStateDir(stateFile);
+        const lock = await acquireSidebarLockWithRetry(stateFile);
+        try {
+            await lock.assertOwned();
+            const existing = readSidebarState(stateFile);
+            await emitMergeStep('read-state');
+            const merged = merge(existing);
+            await emitMergeStep('merged-state');
+            await writeJsonAtomic(stateFile, merged);
+            // `writeJsonAtomic` stages a tmp file with mode 0o600 and renames onto
+            // the target; POSIX rename replaces the inode so the new file inherits
+            // the staged mode bits. Windows ignores POSIX modes so the assertion
+            // in tests is best-effort there.
+            await emitMergeStep('wrote-state');
+        }
+        finally {
+            await lock.release().catch(() => { });
+        }
+    });
+}
+/**
+ * Merge a new machine-state payload against the on-disk state.
+ *
+ * Stale writes (new `checkedAt` < existing) are dropped — only newer/equal
+ * `checkedAt` may replace machine fields. The merge preserves
+ * `routingAuthoritative: true` once it is true (sticky-true), keeps the
+ * existing `activeRouting` intact (routing is merged via its own writer),
+ * and prunes any expired routing entries as a side effect.
+ */
+function mergeMachineState(existing, next) {
+    if (next.checkedAt < existing.checkedAt) {
+        return {
+            ...existing,
+            activeRouting: pruneActiveRouting(existing.activeRouting, Date.now()),
+        };
+    }
+    return {
+        version: SIDEBAR_STATE_VERSION,
+        checkedAt: next.checkedAt,
+        accounts: next.accounts,
+        quotaBackoffUntil: next.quotaBackoffUntil,
+        lastError: next.lastError,
+        routingAuthoritative: existing.routingAuthoritative === true ||
+            next.routingAuthoritative === true,
+        // Symmetric with the stale-write branch: every machine-write merge
+        // re-prunes activeRouting so a long-running TUI session eventually
+        // drops dead routes even when no fresh routing upsert lands. Cheap
+        // (a single Object.entries + sort over ≤100 entries) and bounded.
+        activeRouting: pruneActiveRouting(existing.activeRouting, Date.now()),
+    };
+}
+/**
+ * Upsert a single session's active routing entry. The fetch interceptor calls
+ * this with `authoritative: true` after every final route selection; the
+ * `accountId`/`modelFamily`/`headerStyle` fields are already redacted by the
+ * caller (the writer never sees token or project fields).
+ */
+export async function upsertSidebarActiveRouting(sessionId, entry, options = {}) {
+    const stateFile = options.stateFile ?? getSidebarStateFile();
+    await performSidebarWrite(stateFile, (existing) => {
+        const activeRouting = { ...existing.activeRouting, [sessionId]: entry };
+        return {
+            ...existing,
+            routingAuthoritative: options.authoritative === true ? true : existing.routingAuthoritative,
+            activeRouting: pruneActiveRouting(activeRouting, Date.now()),
+        };
+    });
+}
+/**
+ * Remove one session's active routing entry. The event handler calls this
+ * when a session is deleted so the sidebar does not retain dead routes.
+ */
+export async function removeSidebarActiveRouting(sessionId, options = {}) {
+    const stateFile = options.stateFile ?? getSidebarStateFile();
+    await performSidebarWrite(stateFile, (existing) => {
+        if (!(sessionId in existing.activeRouting)) {
+            return existing;
+        }
+        const activeRouting = { ...existing.activeRouting };
+        delete activeRouting[sessionId];
+        return {
+            ...existing,
+            activeRouting,
+        };
+    });
+}
+/**
+ * Write a new machine-state snapshot. The fetch interceptor and quota
+ * manager call this after each refresh; auth-loader calls it after the
+ * account pool is materialized.
+ */
+export async function setSidebarMachineState(next, options = {}) {
+    const stateFile = options.stateFile ?? getSidebarStateFile();
+    await performSidebarWrite(stateFile, (existing) => mergeMachineState(existing, next));
+}
+void SIDEBAR_STATE_FILE_MODE;
+//# sourceMappingURL=sidebar-state.js.map

package/dist/src/sidebar-state.js.map

@@ -0,0 +1 @@
+{"version":3,"file":"sidebar-state.js","sourceRoot":"","sources":["../../src/sidebar-state.ts"],"names":[],"mappings":"AAAA;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GAqCG;AAEH,OAAO,EAAE,SAAS,EAAE,YAAY,EAAE,MAAM,SAAS,CAAA;AACjD,OAAO,EAAE,OAAO,EAAE,MAAM,SAAS,CAAA;AACjC,OAAO,EAAE,OAAO,EAAE,IAAI,EAAE,MAAM,WAAW,CAAA;AACzC,mEAAmE;AACnE,uEAAuE;AACvE,yDAAyD;AACzD,OAAO,EAAE,eAAe,EAAE,MAAM,+CAA+C,CAAA;AAC/E,OAAO,EACL,qBAAqB,GAEtB,MAAM,4CAA4C,CAAA;AACnD,OAAO,EAAE,QAAQ,EAAE,MAAM,aAAa,CAAA;AAEtC,MAAM,CAAC,MAAM,qBAAqB,GAAG,CAAU,CAAA;AA2D/C,MAAM,CAAC,MAAM,qBAAqB,GAAmB;IACnD,OAAO,EAAE,qBAAqB;IAC9B,SAAS,EAAE,CAAC;IACZ,QAAQ,EAAE,EAAE;IACZ,aAAa,EAAE,EAAE;IACjB,oBAAoB,EAAE,KAAK;CAC5B,CAAA;AAED,MAAM,CAAC,MAAM,iBAAiB,GAAG,qCAAqC,CAAA;AAEtE,MAAM,iBAAiB,GAAG,4BAA4B,CAAA;AACtD,MAAM,sBAAsB,GAAG,oBAAoB,CAAA;AAEnD,yEAAyE;AACzE,MAAM,yBAAyB,GAAG,EAAE,GAAG,EAAE,GAAG,EAAE,GAAG,IAAI,CAAA;AACrD,gEAAgE;AAChE,MAAM,0BAA0B,GAAG,GAAG,CAAA;AAEtC,MAAM,iBAAiB,GAAG,SAAS,CAAA;AACnC,MAAM,mBAAmB,GAAG,MAAM,CAAA;AAClC,MAAM,uBAAuB,GAAG,KAAK,CAAA;AACrC,MAAM,0BAA0B,GAAG,EAAE,CAAA;AACrC,MAAM,yBAAyB,GAAG,EAAE,CAAA;AACpC,MAAM,sBAAsB,GAAG,EAAE,CAAA;AACjC,MAAM,sBAAsB,GAAG,KAAK,CAAA;AACpC,MAAM,uBAAuB,GAAG,KAAK,CAAA;AAErC;;;;GAIG;AACH,MAAM,OAAO,+BAAgC,SAAQ,KAAK;IAC/C,OAAO,CAA0C;IAE1D,YAAY,SAAiB,EAAE,SAAiB;QAC9C,KAAK,CACH,2CAA2C,SAAS,WAAW,SAAS,IAAI,CAC7E,CAAA;QACD,IAAI,CAAC,IAAI,GAAG,iCAAiC,CAAA;QAC7C,IAAI,CAAC,OAAO,GAAG,EAAE,SAAS,EAAE,SAAS,EAAE,CAAA;IACzC,CAAC;CACF;AAuBD,IAAI,iBAAiB,GAA6B,IAAI,CAAA;AAEtD;;;;;GAKG;AACH,MAAM,UAAU,oBAAoB,CAAC,KAA+B;IAClE,iBAAiB,GAAG,KAAK,CAAA;AAC3B,CAAC;AAED,KAAK,UAAU,aAAa,CAAC,IAAsB;IACjD,MAAM,iBAAiB,EAAE,MAAM,EAAE,CAAC,IAAI,CAAC,CAAA;AACzC,CAAC;AAED;;;;;;;GAOG;AACH,MAAM,UAAU,mBAAmB;IACjC,MAAM,QAAQ,GAAG,OAAO,CAAC,GAAG,CAAC,iBAAiB,CAAC,CAAA;IAC/C,IAAI,QAAQ,IAAI,QAAQ,CAAC,IAAI,EAAE,CAAC,MAAM,GAAG,CAAC;QAAE,OAAO,QAAQ,CAAA;IAC3D,MAAM,IAAI,GAAG,QAAQ,IAAI,IAAI,CAAC,OAAO,EAAE,EAAE,QAAQ,EAAE,OAAO,CAAC,CAAA;IAC3D,OAAO,IAAI,CAAC,IAAI,EAAE,iBAAiB,EAAE,sBAAsB,CAAC,CAAA;AAC9D,CAAC;AAED;;;;;;;;;GASG;AACH,MAAM,UAAU,gBAAgB,CAC9B,OAAe,mBAAmB,EAAE;IAEpC,IAAI,GAAW,CAAA;IACf,IAAI,CAAC;QACH,GAAG,GAAG,YAAY,CAAC,IAAI,EAAE,OAAO,CAAC,CAAA;IACnC,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,GAAG,qBAAqB,EAAE,CAAA;IACrC,CAAC;IACD,IAAI,MAAe,CAAA;IACnB,IAAI,CAAC;QACH,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,GAAG,CAAC,CAAA;IAC1B,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,EAAE,GAAG,qBAAqB,EAAE,SAAS,EAAE,gBAAgB,EAAE,CAAA;IAClE,CAAC;IACD,OAAO,qBAAqB,CAAC,MAAM,CAAC,CAAA;AACtC,CAAC;AAED,SAAS,qBAAqB,CAAC,KAAc;IAC3C,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC,EAAE,CAAC;QACrB,OAAO,EAAE,GAAG,qBAAqB,EAAE,SAAS,EAAE,OAAO,EAAE,CAAA;IACzD,CAAC;IACD,MAAM,MAAM,GAAG,KAAgC,CAAA;IAC/C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,CAAA;IAC9B,IAAI,OAAO,KAAK,qBAAqB,EAAE,CAAC;QACtC,OAAO;YACL,GAAG,qBAAqB;YACxB,SAAS,EAAE,uBAAuB,aAAa,CAAC,OAAO,CAAC,EAAE;SAC3D,CAAA;IACH,CAAC;IAED,MAAM,WAAW,GAAG,MAAM,CAAC,QAAQ,CAAA;IACnC,MAAM,QAAQ,GAAG,KAAK,CAAC,OAAO,CAAC,WAAW,CAAC;QACzC,CAAC,CAAC,WAAW;aACR,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,gBAAgB,CAAC,KAAK,CAAC,CAAC;aACvC,MAAM,CAAC,CAAC,KAAK,EAAgC,EAAE,CAAC,KAAK,KAAK,IAAI,CAAC;QACpE,CAAC,CAAC,EAAE,CAAA;IAEN,MAAM,UAAU,GAAG,MAAM,CAAC,aAAa,CAAA;IACvC,MAAM,aAAa,GAAwC,EAAE,CAAA;IAC7D,IAAI,QAAQ,CAAC,UAAU,CAAC,EAAE,CAAC;QACzB,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAC7C,UAAqC,CACtC,EAAE,CAAC;YACF,MAAM,UAAU,GAAG,gBAAgB,CAAC,KAAK,CAAC,CAAA;YAC1C,IAAI,UAAU;gBAAE,aAAa,CAAC,SAAS,CAAC,GAAG,UAAU,CAAA;QACvD,CAAC;IACH,CAAC;IAED,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,CAAA;IAClD,MAAM,oBAAoB,GAAG,MAAM,CAAC,oBAAoB,KAAK,IAAI,CAAA;IACjE,MAAM,iBAAiB,GAAG,cAAc,CAAC,MAAM,CAAC,iBAAiB,CAAC,CAAA;IAClE,MAAM,SAAS,GACb,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,SAAS,CAAA;IAErE,OAAO;QACL,OAAO,EAAE,qBAAqB;QAC9B,SAAS,EAAE,SAAS,IAAI,CAAC;QACzB,QAAQ;QACR,aAAa;QACb,oBAAoB;QACpB,iBAAiB,EAAE,iBAAiB,IAAI,SAAS;QACjD,SAAS;KACV,CAAA;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACjC,MAAM,MAAM,GAAG,KAAgC,CAAA;IAC/C,MAAM,EAAE,GAAG,OAAO,MAAM,CAAC,EAAE,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,EAAE,CAAC,CAAC,CAAC,IAAI,CAAA;IAC3D,MAAM,KAAK,GAAG,OAAO,MAAM,CAAC,KAAK,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,KAAK,CAAC,CAAC,CAAC,IAAI,CAAA;IACpE,IAAI,CAAC,EAAE,IAAI,CAAC,KAAK;QAAE,OAAO,IAAI,CAAA;IAC9B,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,KAAK,KAAK,CAAA;IACxC,MAAM,MAAM,GAAG,WAAW,CAAC,cAAc,CAAC,MAAM,CAAC,MAAM,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAA;IACjE,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,KAAK,IAAI,CAAA;IACvC,MAAM,aAAa,GAAG,cAAc,CAAC,MAAM,CAAC,aAAa,CAAC,IAAI,SAAS,CAAA;IACvE,MAAM,QAAQ,GAAG,MAAM,CAAC,KAAK,CAAA;IAC7B,MAAM,KAAK,GAAiC,EAAE,CAAA;IAC9C,IAAI,QAAQ,CAAC,QAAQ,CAAC,EAAE,CAAC;QACvB,KAAK,MAAM,GAAG,IAAI;YAChB,QAAQ;YACR,YAAY;YACZ,cAAc;YACd,SAAS;SACD,EAAE,CAAC;YACX,MAAM,KAAK,GAAI,QAAoC,CAAC,GAAG,CAAC,CAAA;YACxD,MAAM,UAAU,GAAG,cAAc,CAAC,KAAK,CAAC,CAAA;YACxC,IAAI,UAAU;gBAAE,KAAK,CAAC,GAAG,CAAC,GAAG,UAAU,CAAA;QACzC,CAAC;IACH,CAAC;IACD,OAAO;QACL,EAAE;QACF,KAAK;QACL,OAAO;QACP,MAAM;QACN,OAAO;QACP,aAAa;QACb,KAAK;KACN,CAAA;AACH,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACjC,MAAM,MAAM,GAAG,KAAgC,CAAA;IAC/C,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,gBAAgB,CAAC,CAAA;IACzD,IAAI,SAAS,KAAK,IAAI;QAAE,OAAO,IAAI,CAAA;IACnC,MAAM,OAAO,GAAG,cAAc,CAAC,MAAM,CAAC,OAAO,CAAC,IAAI,SAAS,CAAA;IAC3D,OAAO;QACL,gBAAgB,EAAE,WAAW,CAAC,SAAS,EAAE,CAAC,EAAE,GAAG,CAAC;QAChD,OAAO;KACR,CAAA;AACH,CAAC;AAED,SAAS,gBAAgB,CAAC,KAAc;IACtC,IAAI,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,IAAI,CAAA;IACjC,MAAM,MAAM,GAAG,KAAgC,CAAA;IAC/C,MAAM,SAAS,GACb,OAAO,MAAM,CAAC,SAAS,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,SAAS,CAAC,CAAC,CAAC,IAAI,CAAA;IAChE,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAA;IACtC,MAAM,WAAW,GAAG,MAAM,CAAC,WAAW,CAAA;IACtC,MAAM,QAAQ,GAAG,MAAM,CAAC,QAAQ,CAAA;IAChC,MAAM,SAAS,GAAG,cAAc,CAAC,MAAM,CAAC,SAAS,CAAC,IAAI,CAAC,CAAA;IACvD,IACE,CAAC,SAAS;QACV,CAAC,WAAW,KAAK,QAAQ,IAAI,WAAW,KAAK,QAAQ,CAAC;QACtD,CAAC,WAAW,KAAK,aAAa,IAAI,WAAW,KAAK,YAAY,CAAC,EAC/D,CAAC;QACD,OAAO,IAAI,CAAA;IACb,CAAC;IACD,OAAO;QACL,SAAS;QACT,WAAW;QACX,WAAW;QACX,QAAQ,EACN,QAAQ,KAAK,QAAQ;YACrB,QAAQ,KAAK,aAAa;YAC1B,QAAQ,KAAK,QAAQ;YACnB,CAAC,CAAC,QAAQ;YACV,CAAC,CAAC,SAAS;QACf,SAAS;KACV,CAAA;AACH,CAAC;AAED,SAAS,QAAQ,CAAC,KAAc;IAC9B,OAAO,OAAO,KAAK,KAAK,QAAQ,IAAI,KAAK,KAAK,IAAI,IAAI,CAAC,KAAK,CAAC,OAAO,CAAC,KAAK,CAAC,CAAA;AAC7E,CAAC;AAED,SAAS,cAAc,CAAC,KAAc;IACpC,IAAI,OAAO,KAAK,KAAK,QAAQ,IAAI,MAAM,CAAC,QAAQ,CAAC,KAAK,CAAC;QAAE,OAAO,KAAK,CAAA;IACrE,IAAI,OAAO,KAAK,KAAK,QAAQ,EAAE,CAAC;QAC9B,MAAM,MAAM,GAAG,MAAM,CAAC,KAAK,CAAC,CAAA;QAC5B,OAAO,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,CAAC,CAAC,CAAC,MAAM,CAAC,CAAC,CAAC,IAAI,CAAA;IAChD,CAAC;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED,SAAS,WAAW,CAAC,KAAoB,EAAE,GAAW,EAAE,GAAW;IACjE,IAAI,KAAK,KAAK,IAAI;QAAE,OAAO,GAAG,CAAA;IAC9B,IAAI,KAAK,GAAG,GAAG;QAAE,OAAO,GAAG,CAAA;IAC3B,IAAI,KAAK,GAAG,GAAG;QAAE,OAAO,GAAG,CAAA;IAC3B,OAAO,KAAK,CAAA;AACd,CAAC;AAED,SAAS,aAAa,CAAC,KAAc;IACnC,IAAI,OAAO,KAAK,KAAK,QAAQ;QAAE,OAAO,KAAK,CAAA;IAC3C,IAAI,CAAC;QACH,OAAO,IAAI,CAAC,SAAS,CAAC,KAAK,CAAC,IAAI,SAAS,CAAA;IAC3C,CAAC;IAAC,MAAM,CAAC;QACP,OAAO,SAAS,CAAA;IAClB,CAAC;AACH,CAAC;AAED;;;GAGG;AACH,MAAM,UAAU,qBAAqB,CACnC,OAAe,mBAAmB,EAAE;IAEpC,SAAS,CAAC,OAAO,CAAC,IAAI,CAAC,EAAE,EAAE,SAAS,EAAE,IAAI,EAAE,IAAI,EAAE,sBAAsB,EAAE,CAAC,CAAA;AAC7E,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB,CAChC,GAAwC,EACxC,GAAW;IAEX,MAAM,MAAM,GAAG,GAAG,GAAG,yBAAyB,CAAA;IAC9C,MAAM,QAAQ,GAAyC,EAAE,CAAA;IACzD,KAAK,MAAM,CAAC,SAAS,EAAE,KAAK,CAAC,IAAI,MAAM,CAAC,OAAO,CAAC,GAAG,CAAC,EAAE,CAAC;QACrD,IAAI,KAAK,CAAC,SAAS,IAAI,MAAM,EAAE,CAAC;YAC9B,QAAQ,CAAC,IAAI,CAAC,CAAC,SAAS,EAAE,KAAK,CAAC,CAAC,CAAA;QACnC,CAAC;IACH,CAAC;IACD,QAAQ,CAAC,IAAI,CAAC,CAAC,CAAC,EAAE,CAAC,EAAE,EAAE,CAAC,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,GAAG,CAAC,CAAC,CAAC,CAAC,CAAC,SAAS,CAAC,CAAA;IACxD,IAAI,QAAQ,CAAC,MAAM,IAAI,0BAA0B,EAAE,CAAC;QAClD,OAAO,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,CAAA;IACrC,CAAC;IACD,OAAO,MAAM,CAAC,WAAW,CAAC,QAAQ,CAAC,KAAK,CAAC,CAAC,EAAE,0BAA0B,CAAC,CAAC,CAAA;AAC1E,CAAC;AA8BD;;;;;GAKG;AACH,MAAM,UAAU,uBAAuB,CACrC,MAAoC;IAEpC,MAAM,EAAE,GAAG,QAAQ,MAAM,CAAC,KAAK,EAAE,CAAA;IACjC,MAAM,KAAK,GAAG,WAAW,MAAM,CAAC,KAAK,GAAG,CAAC,EAAE,CAAA;IAC3C,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,KAAK,KAAK,CAAA;IACxC,MAAM,OAAO,GAAG,MAAM,CAAC,OAAO,KAAK,IAAI,CAAA;IACvC,MAAM,aAAa,GACjB,OAAO,MAAM,CAAC,gBAAgB,KAAK,QAAQ;QAC3C,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC,gBAAgB,CAAC;QACtC,CAAC,CAAC,MAAM,CAAC,gBAAgB;QACzB,CAAC,CAAC,SAAS,CAAA;IACf,MAAM,MAAM,GAAG,WAAW,CACxB,OAAO,MAAM,CAAC,WAAW,KAAK,QAAQ,CAAC,CAAC,CAAC,MAAM,CAAC,WAAW,CAAC,CAAC,CAAC,IAAI,EAClE,CAAC,EACD,GAAG,CACJ,CAAA;IAED,MAAM,KAAK,GAAiC,EAAE,CAAA;IAC9C,MAAM,MAAM,GAAG,MAAM,CAAC,WAAW,CAAA;IACjC,IAAI,MAAM,EAAE,CAAC;QACX,KAAK,MAAM,GAAG,IAAI;YAChB,QAAQ;YACR,YAAY;YACZ,cAAc;YACd,SAAS;SACD,EAAE,CAAC;YACX,MAAM,KAAK,GAAG,MAAM,CAAC,GAAG,CAAC,CAAA;YACzB,IAAI,CAAC,KAAK;gBAAE,SAAQ;YACpB,MAAM,QAAQ,GAAG,KAAK,CAAC,iBAAiB,CAAA;YACxC,IAAI,OAAO,QAAQ,KAAK,QAAQ,IAAI,CAAC,MAAM,CAAC,QAAQ,CAAC,QAAQ,CAAC;gBAAE,SAAQ;YACxE,MAAM,gBAAgB,GAAG,WAAW,CAAC,IAAI,CAAC,KAAK,CAAC,QAAQ,GAAG,GAAG,CAAC,EAAE,CAAC,EAAE,GAAG,CAAC,CAAA;YACxE,IAAI,OAA2B,CAAA;YAC/B,IAAI,OAAO,KAAK,CAAC,SAAS,KAAK,QAAQ,IAAI,KAAK,CAAC,SAAS,CAAC,MAAM,GAAG,CAAC,EAAE,CAAC;gBACtE,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,KAAK,CAAC,SAAS,CAAC,CAAA;gBAC1C,IAAI,MAAM,CAAC,QAAQ,CAAC,MAAM,CAAC;oBAAE,OAAO,GAAG,MAAM,CAAA;YAC/C,CAAC;YACD,KAAK,CAAC,GAAG,CAAC,GAAG,EAAE,gBAAgB,EAAE,OAAO,EAAE,CAAA;QAC5C,CAAC;IACH,CAAC;IAED,OAAO;QACL,EAAE;QACF,KAAK;QACL,OAAO;QACP,MAAM;QACN,OAAO;QACP,aAAa;QACb,KAAK;KACN,CAAA;AACH,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,oCAAoC,CAClD,QAAwC,EACxC,UAKI,EAAE;IAEN,OAAO;QACL,SAAS,EAAE,OAAO,CAAC,SAAS,IAAI,IAAI,CAAC,GAAG,EAAE;QAC1C,QAAQ,EAAE,QAAQ,CAAC,GAAG,CAAC,CAAC,KAAK,EAAE,EAAE,CAAC,uBAAuB,CAAC,KAAK,CAAC,CAAC;QACjE,iBAAiB,EAAE,OAAO,CAAC,iBAAiB;QAC5C,SAAS,EAAE,OAAO,CAAC,SAAS;QAC5B,oBAAoB,EAAE,OAAO,CAAC,oBAAoB;KACnD,CAAA;AACH,CAAC;AAMD,IAAI,iBAAiB,GAAkB,OAAO,CAAC,OAAO,EAAE,CAAA;AAExD,SAAS,mBAAmB,CAAI,IAAsB;IACpD,qEAAqE;IACrE,2EAA2E;IAC3E,MAAM,IAAI,GAAG,iBAAiB,CAAC,IAAI,CAAC,IAAI,EAAE,IAAI,CAAC,CAAA;IAC/C,iBAAiB,GAAG,IAAI,CAAC,IAAI,CAC3B,GAAG,EAAE,CAAC,SAAS,EACf,GAAG,EAAE,CAAC,SAAS,CAChB,CAAA;IACD,OAAO,IAAI,CAAA;AACb,CAAC;AAED;;;;GAIG;AACH,MAAM,UAAU,kBAAkB;IAChC,OAAO,iBAAiB,CAAA;AAC1B,CAAC;AAED,KAAK,UAAU,KAAK,CAAC,EAAU;IAC7B,MAAM,IAAI,OAAO,CAAC,CAAC,OAAO,EAAE,EAAE,CAAC,UAAU,CAAC,OAAO,EAAE,EAAE,CAAC,CAAC,CAAA;AACzD,CAAC;AAED,KAAK,UAAU,2BAA2B,CACxC,SAAiB;IAEjB,MAAM,KAAK,GAAG,IAAI,CAAC,GAAG,EAAE,CAAA;IACxB,IAAI,OAAO,GAAG,CAAC,CAAA;IACf,OAAO,IAAI,EAAE,CAAC;QACZ,MAAM,aAAa,CAAC,YAAY,CAAC,CAAA;QACjC,MAAM,IAAI,GAAG,MAAM,qBAAqB,CAAC;YACvC,IAAI,EAAE,SAAS;YACf,IAAI,EAAE,iBAAiB;YACvB,KAAK,EAAE,mBAAmB;YAC1B,KAAK,EAAE,IAAI;SACZ,CAAC,CAAA;QACF,IAAI,IAAI,EAAE,CAAC;YACT,MAAM,aAAa,CAAC,eAAe,CAAC,CAAA;YACpC,OAAO,IAAI,CAAA;QACb,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,EAAE,GAAG,KAAK,CAAA;QAClC,IAAI,OAAO,IAAI,uBAAuB,EAAE,CAAC;YACvC,MAAM,IAAI,+BAA+B,CACvC,SAAS,EACT,uBAAuB,CACxB,CAAA;QACH,CAAC;QACD,MAAM,OAAO,GAAG,IAAI,CAAC,GAAG,CACtB,yBAAyB,EACzB,0BAA0B,GAAG,OAAO,GAAG,EAAE,CAC1C,CAAA;QACD,MAAM,MAAM,GAAG,IAAI,CAAC,KAAK,CAAC,IAAI,CAAC,MAAM,EAAE,GAAG,sBAAsB,CAAC,CAAA;QACjE,MAAM,KAAK,CAAC,OAAO,GAAG,MAAM,CAAC,CAAA;QAC7B,OAAO,EAAE,CAAA;IACX,CAAC;AACH,CAAC;AAED,KAAK,UAAU,mBAAmB,CAChC,SAAiB,EACjB,KAAmD;IAEnD,MAAM,mBAAmB,CAAC,KAAK,IAAI,EAAE;QACnC,qBAAqB,CAAC,SAAS,CAAC,CAAA;QAChC,MAAM,IAAI,GAAG,MAAM,2BAA2B,CAAC,SAAS,CAAC,CAAA;QACzD,IAAI,CAAC;YACH,MAAM,IAAI,CAAC,WAAW,EAAE,CAAA;YACxB,MAAM,QAAQ,GAAG,gBAAgB,CAAC,SAAS,CAAC,CAAA;YAC5C,MAAM,aAAa,CAAC,YAAY,CAAC,CAAA;YACjC,MAAM,MAAM,GAAG,KAAK,CAAC,QAAQ,CAAC,CAAA;YAC9B,MAAM,aAAa,CAAC,cAAc,CAAC,CAAA;YACnC,MAAM,eAAe,CAAC,SAAS,EAAE,MAAM,CAAC,CAAA;YACxC,uEAAuE;YACvE,uEAAuE;YACvE,qEAAqE;YACrE,iCAAiC;YACjC,MAAM,aAAa,CAAC,aAAa,CAAC,CAAA;QACpC,CAAC;gBAAS,CAAC;YACT,MAAM,IAAI,CAAC,OAAO,EAAE,CAAC,KAAK,CAAC,GAAG,EAAE,GAAE,CAAC,CAAC,CAAA;QACtC,CAAC;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;;;;;GAQG;AACH,SAAS,iBAAiB,CACxB,QAAwB,EACxB,IAAyB;IAEzB,IAAI,IAAI,CAAC,SAAS,GAAG,QAAQ,CAAC,SAAS,EAAE,CAAC;QACxC,OAAO;YACL,GAAG,QAAQ;YACX,aAAa,EAAE,kBAAkB,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;SACtE,CAAA;IACH,CAAC;IACD,OAAO;QACL,OAAO,EAAE,qBAAqB;QAC9B,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,QAAQ,EAAE,IAAI,CAAC,QAAQ;QACvB,iBAAiB,EAAE,IAAI,CAAC,iBAAiB;QACzC,SAAS,EAAE,IAAI,CAAC,SAAS;QACzB,oBAAoB,EAClB,QAAQ,CAAC,oBAAoB,KAAK,IAAI;YACtC,IAAI,CAAC,oBAAoB,KAAK,IAAI;QACpC,mEAAmE;QACnE,mEAAmE;QACnE,mEAAmE;QACnE,kEAAkE;QAClE,aAAa,EAAE,kBAAkB,CAAC,QAAQ,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;KACtE,CAAA;AACH,CAAC;AAED;;;;;GAKG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,SAAiB,EACjB,KAA0B,EAC1B,UAAkE,EAAE;IAEpE,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,mBAAmB,EAAE,CAAA;IAC5D,MAAM,mBAAmB,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;QAChD,MAAM,aAAa,GAAG,EAAE,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAC,SAAS,CAAC,EAAE,KAAK,EAAE,CAAA;QACvE,OAAO;YACL,GAAG,QAAQ;YACX,oBAAoB,EAClB,OAAO,CAAC,aAAa,KAAK,IAAI,CAAC,CAAC,CAAC,IAAI,CAAC,CAAC,CAAC,QAAQ,CAAC,oBAAoB;YACvE,aAAa,EAAE,kBAAkB,CAAC,aAAa,EAAE,IAAI,CAAC,GAAG,EAAE,CAAC;SAC7D,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;GAGG;AACH,MAAM,CAAC,KAAK,UAAU,0BAA0B,CAC9C,SAAiB,EACjB,UAAoC,EAAE;IAEtC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,mBAAmB,EAAE,CAAA;IAC5D,MAAM,mBAAmB,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE;QAChD,IAAI,CAAC,CAAC,SAAS,IAAI,QAAQ,CAAC,aAAa,CAAC,EAAE,CAAC;YAC3C,OAAO,QAAQ,CAAA;QACjB,CAAC;QACD,MAAM,aAAa,GAAG,EAAE,GAAG,QAAQ,CAAC,aAAa,EAAE,CAAA;QACnD,OAAO,aAAa,CAAC,SAAS,CAAC,CAAA;QAC/B,OAAO;YACL,GAAG,QAAQ;YACX,aAAa;SACd,CAAA;IACH,CAAC,CAAC,CAAA;AACJ,CAAC;AAED;;;;GAIG;AACH,MAAM,CAAC,KAAK,UAAU,sBAAsB,CAC1C,IAAyB,EACzB,UAAoC,EAAE;IAEtC,MAAM,SAAS,GAAG,OAAO,CAAC,SAAS,IAAI,mBAAmB,EAAE,CAAA;IAC5D,MAAM,mBAAmB,CAAC,SAAS,EAAE,CAAC,QAAQ,EAAE,EAAE,CAChD,iBAAiB,CAAC,QAAQ,EAAE,IAAI,CAAC,CAClC,CAAA;AACH,CAAC;AAED,KAAK,uBAAuB,CAAA"}

package/dist/src/tui/command-dialogs.d.ts

@@ -0,0 +1,61 @@
+/** @jsxImportSource @opentui/solid */
+/**
+ * Imperative command-dialog dispatcher for the /antigravity-* slash commands.
+ *
+ * Mirrors the fleet sibling layout (see `anthropic-auth-live` /
+ * `openai-auth-live` `packages/opencode/src/tui/command-dialogs.tsx`):
+ * each command's dialog opens with its data/status content rendered into the
+ * dialog BODY as a column of plain `<text>` nodes — non-selectable,
+ * non-searchable — and a separate `<DialogSelect>` below carries ONLY the
+ * real actions with proper `{title, description}` shapes the host renders
+ * on separate lines. The earlier implementation crammed the data rows into
+ * `DialogSelect`'s `placeholder` (which participates in type-ahead search)
+ * and concatenated label+description into a single highlighted option line;
+ * this rewrite separates data from actions the way the host expects.
+ *
+ * Contract:
+ * - Every main/subdialog calls `api.ui.dialog.setSize('xlarge')` before
+ *   `api.ui.dialog.replace()` so the host reserves enough width for the
+ *   longest line in any branch.
+ * - `apply(command, args, options?)` is the RPC apply path the dispatch
+ *   site (the module-scoped poll in `tui.tsx`) supplies. The dispatcher
+ *   forwards `options.timeoutMs` so a long-running apply (account add /
+ *   refresh, future quota refresh) gets the right RPC timeout.
+ * - All `DialogSelect` options must remain VISIBLE — the host's
+ *   `disabled: true` is a hard hide, so this file must never set it.
+ *   Invalid actions stay visible with an explanatory description and are
+ *   rejected in `onSelect`. The `no hide-property option scan` test in
+ *   the verification gates pins this contract.
+ * - `onSelect` awaits the apply, toasts the result, then either clears
+ *   the dialog or replaces it for multi-step flows. The dialog stack
+ *   never sees a `clear()` between apply and re-render so the user
+ *   always sees feedback (per the dispatcher contract).
+ */
+import type { TuiPluginApi } from '@opencode-ai/plugin/tui';
+import type { CommandModalName, OpenDialogPayload } from '../rpc/protocol';
+/**
+ * Apply handler the dispatcher calls when the user selects a dialog
+ * option. Mirrors `ApplyRequest` from `rpc/protocol` plus the
+ * `RpcRequestOptions.timeoutMs` knob the RPC client already accepts —
+ * the call site in `tui.tsx` forwards these directly into
+ * `rpcClient.apply(request, options)`.
+ */
+export type ApplyFn = (command: CommandModalName, args: string, options?: {
+    timeoutMs?: number;
+}) => Promise<{
+    text: string;
+    knobs: Record<string, unknown>;
+}>;
+/**
+ * Mount the dialog for `payload.command` on the live TUI.
+ *
+ * The dispatcher branches on `payload.command` — each branch is
+ * self-contained: render the data body, render the host DialogSelect
+ * below it with the real actions, wire `onSelect` to await `apply(...)`,
+ * then toast the result and clear (or replace for multi-step flows).
+ * Unknown commands throw so a future command registered in
+ * `MODAL_COMMANDS` without a dispatcher branch fails loudly at the first
+ * dialog open.
+ */
+export declare function openCommandDialog(api: TuiPluginApi, payload: OpenDialogPayload, apply: ApplyFn): void;
+//# sourceMappingURL=command-dialogs.d.ts.map

package/dist/src/tui/command-dialogs.d.ts.map

@@ -0,0 +1 @@
+{"version":3,"file":"command-dialogs.d.ts","sourceRoot":"","sources":["../../../src/tui/command-dialogs.tsx"],"names":[],"mappings":"AAAA,sCAAsC;AAEtC;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;;GA+BG;AAEH,OAAO,KAAK,EAAE,YAAY,EAAE,MAAM,yBAAyB,CAAA;AAE3D,OAAO,KAAK,EAAE,gBAAgB,EAAE,iBAAiB,EAAE,MAAM,iBAAiB,CAAA;AAE1E;;;;;;GAMG;AACH,MAAM,MAAM,OAAO,GAAG,CACpB,OAAO,EAAE,gBAAgB,EACzB,IAAI,EAAE,MAAM,EACZ,OAAO,CAAC,EAAE;IAAE,SAAS,CAAC,EAAE,MAAM,CAAA;CAAE,KAC7B,OAAO,CAAC;IAAE,IAAI,EAAE,MAAM,CAAC;IAAC,KAAK,EAAE,MAAM,CAAC,MAAM,EAAE,OAAO,CAAC,CAAA;CAAE,CAAC,CAAA;AAE9D;;;;;;;;;;GAUG;AACH,wBAAgB,iBAAiB,CAC/B,GAAG,EAAE,YAAY,EACjB,OAAO,EAAE,iBAAiB,EAC1B,KAAK,EAAE,OAAO,GACb,IAAI,CA0BN"}